UCF STIG Viewer Logo

GIDs reserved for system accounts must not be assigned to non-system groups.


Overview

Finding ID Version Rule ID IA Controls Severity
V-780 GEN000360 SV-28658r1_rule ECSC-1 Medium
Description
Reserved GIDs are typically used by system software packages. If non-system groups have GIDs in this range, they may conflict with system software, possibly leading to the group having permissions to modify system files.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-29001r1_chk )
# more /etc/passwd
Confirm all accounts with a GID of 99 and below are used by a system account. If a GID reserved for system accounts (0 - 99) is used by a non-system account, this is a finding.
Fix Text (F-25999r1_fix)
Change the primary group GID numbers for non-system accounts with reserved primary group GIDs (those less or equal to 99).

# usermod -g